Privacy Policy
Last updated 26 October 2026 · Bridgeshore Labs, LLC
The short version
- We don’t ask for your name, email address or phone number. Your account is an anonymous one, made for the app on your phone.
- Your photos are stored in Ireland (EU). To make and check your video, they go to GitHub’s computers and to AI services in the US and other countries: fal.ai, which runs the Kling video models, and Claude by Anthropic. No person at Albumagic looks at them to make your video.
- We never use your photos to train AI.
- We delete photos 30 days after your video is ready, and videos after 90 days. You can delete everything sooner in Settings.
- No ads, no trackers, no analytics and no cookies on our website, and we never sell your data.
1. Who we are
Albumagic is made by Bridgeshore Labs, LLC, a Delaware limited liability company, of 1818 Bellmore Ave, North Bellmore, NY 11710, USA (“we”, “us”). We decide how the data in this policy is used, so we are responsible for it. Under EU and UK law, we are its controller.
This policy covers the Albumagic app for iPhone and Android and our website, albumagicapp.com, with its watch and invite pages. It applies to our customers, to the people who appear in the photos customers choose, and to anyone who watches a video by link or opens an invite.
Apple and Google run the stores where you get the app and pay for videos. They handle that part under their own privacy policies (section 6). Our Terms of Use explain how the rest of Albumagic works.
Questions about this policy: support@bridgeshorelabs.com.
2. What we collect
- Your account. When you first open the app, our back end makes an anonymous account for that install: a random account number, with when it was made and last used. The app shows a short account code made from it in My videos and Settings, so you can quote it when you write to us. The app keeps your sign-in, and a list of the videos you have opened, on your phone. If your phone’s backup with Apple or Google includes app data, it can carry your sign-in to a new phone. That copy stays with Apple or Google, under your backup settings, and never reaches us.
- What you choose and type: the occasion, the mood, the opening, the screen shape, the titles (an opening title, a line under it and closing words, up to 80 characters each), the language of the titles, the number of photos and the video’s size. Titles often contain names. With each order we also keep what you agreed to on the consent screen, which version of it, and when.
- Your photos. You can add up to 150 photos. The app picks the best on your phone, and only the ones your video uses, up to 80, leave your phone. Before a photo leaves, the app resizes it to at most 2,560 pixels on its long side and saves it as a new JPEG file. This removes the file’s metadata, including its location and camera details. The app reads each photo’s date on your phone to put the photos in order; the date isn’t sent. The app uses only the photos you pick, although on iPhone, iOS may ask you to allow access to your photos.
- What our service makes from them: frames prepared from each photo (cropped, or enlarged or extended at the edges by AI); a box marking where the faces are, used only for framing; a short AI-written description of each photo, such as “a smiling woman holding a newborn”, and instructions for how each moment should move; the clips, the music, the opening scene, the finished video and a still of each moment; and the results of our checks (passed or failed, with a short reason such as “a face changed”).
- Purchases. When you buy a video, Apple or Google tells RevenueCat, which tells us: the product (the video’s size), the store’s transaction number, the store, whether it was a test purchase, the time, and whether it was later refunded. We keep the same kind of record for a free video. RevenueCat also keeps the price and a country for each purchase (section 6). We never receive your card or bank details.
- Watch links. When you copy a link, we make an unguessable code for it and keep it with the order until you turn the link off. If a viewer reports the video, we keep the reason they type, if any (up to 500 characters), and the time. We keep nothing else about the people who watch, apart from the technical logs below.
- Invites. Your invite code; how many times its invite page was opened (a count, with nothing about the visitors); which accounts entered your code; when a friend’s first video was paid for; and the free videos you received. If you enter a friend’s code, we record that too.
- Messages. If you write to us, your email address and what you write.
- Technical data. Our providers log technical details of each request to the app’s back end and to our website, watch and invite pages included: for example the IP address, the time, the address requested and the browser type. We use these logs only to keep Albumagic secure and working.
What we don’t collect: your name, your email address (unless you write to us), your phone number, your contacts, your location (beyond the country RevenueCat records with each purchase), or an advertising identifier or any other identifier used for tracking. The app and the website have no ads, no advertising or tracking tools and no analytics tools, and the website sets no cookies.
Why we use it, and our legal bases
For people in the EU, the EEA and the UK, this table gives the legal basis for each use under the GDPR and the UK GDPR.
| What we do | Data used | Legal basis |
|---|---|---|
| Make, check and deliver your video, make the changes you ask for, and apply free videos | Photos, titles and choices, your account, purchase records, what our service makes | Our contract with you (Art. 6(1)(b)). For people in the photos who aren’t you: our legitimate interest, and yours, in making the video you asked for (Art. 6(1)(f)) |
| Check photos against our content rules before any clip is made | Photos | Legitimate interests in protecting the people shown and preventing abuse of the service (Art. 6(1)(f)); legal obligation where a law requires us to act (Art. 6(1)(c)) |
| Run watch links, and handle reports about them | The link’s code, the video and its titles, a report’s reason | Our contract with you; legitimate interests in keeping shared videos safe (Art. 6(1)(f)) |
| Run invites and give free videos | Invite codes, the count of page opens, invite records | Our contract with you, under the invite rules in our Terms of Use |
| Keep the app, the back end and the website secure, and prevent fraud and abuse, for example by limiting unfinished orders | Your account, technical logs, order records | Legitimate interests (Art. 6(1)(f)) |
| Keep purchase records for accounting and tax, and handle refunds and disputes | Purchase records | Legal obligation (Art. 6(1)(c)) and legitimate interests (Art. 6(1)(f)) |
| Answer your messages | Your email address, your message and any order details you give us | Our contract with you, or legitimate interests (Art. 6(1)(f)) |
| Comply with the law and protect people’s rights, including reports to the authorities | Any data relevant to the matter | Legal obligation (Art. 6(1)(c)) and legitimate interests (Art. 6(1)(f)) |
Before you choose photos, the app asks your explicit permission to send them to the AI services it names. We ask because Apple requires that permission before personal data goes to third-party AI, and so that you know. Our legal basis for processing your photos is still our contract with you.
You don’t have to give us any data, but without photos and choices we can’t make a video, and without a purchase we can’t start one. We don’t use your data for advertising, profiling or marketing.
3. Photos of other people and children
Most videos show other people: family and friends, often children, and sometimes people who have died. Before you choose photos, you confirm that you have the right to use them and that the people in them agree, or, for a child, that you are a parent or guardian or have a parent’s or guardian’s permission (Terms of Use, section 4). We can’t check this, so we rely on your promise.
We use these photos only to make, check and deliver your video, and we delete them on the schedule in section 8. We never use them for marketing or to train AI, and we never try to identify anyone.
Photos can show things the law treats as sensitive, such as someone’s religion at a ceremony or their health in a hospital. We don’t try to work out or record such things, and we use the photos only to make your video.
Children’s photos come from adults who confirm that they are the child’s parent or legal guardian, or have a parent’s or guardian’s permission. Our checks refuse any order that shows a child in a suggestive way (section 4).
If you, or your child, are in someone’s photos. We don’t know who you are, and we can’t search for you by face, because we don’t recognise faces. We have no way to reach the people in customers’ photos, so this public policy is how we tell them what happens to their images. If you think a customer used a photo of you or your child without permission, write to us with whatever details you have, such as a watch link. We will help where we can, for example by deleting an order’s photos if we can find the order.
4. How AI makes and checks your video
Albumagic is fully automated. No person edits your video or looks at your photos to make it. These are the steps for every order:
- On your phone, the app picks the best photos from small copies, then prepares the ones your video uses (section 2) and uploads them to our private storage in Ireland (EU). Nothing is sent for the picking.
- After you pay, our video maker, running on GitHub’s computers, downloads the photos. A small photo may first be enlarged by an AI tool on fal.ai.
- Before any clip is made, Claude, an AI model by Anthropic, looks at every photo. It checks the photo against our content rules, marks where the faces are so nobody is cut out, and writes a short description. If a photo shows sexual or suggestive content, a child in any suggestive way, or graphic violence, we stop the whole order. If a photo is innocent but not right to animate, such as a baby in the bath or a medical scene, we leave it out, and the app tells you which.
- Each photo is framed to your screen shape. Where needed, an AI tool on fal.ai extends its edges.
- Claude writes how each photo should move into the next, and Kling video models, through fal.ai, make each moment from two photos.
- Claude compares each moment with its two photos. A moment that fails is made again, and one that keeps failing becomes a plain dissolve.
- An AI music model on fal.ai composes the music from text only: the mood, the occasion and the length. The opening scene is also made from text. Neither sees your photos.
- Claude looks over the finished video: the titles as typed, the faces and the picture. A video that passes goes to your account. A video that fails is never delivered, and your purchase becomes a free video of the same size.
Our AI providers also run their own safety filters, which can block a photo or a moment.
Faces. We locate faces only to frame photos, and our checks compare each moment with its photos visually. We don’t create or keep face templates, face measurements or any other biometric identifier, and we don’t use photos to identify or recognise anyone.
Decisions made by our checks. Refusing an order and holding back a failed video are decisions made by automated means. A failed video gives you a free video, and your store’s refund process stays open to you. If you disagree with a decision, write to us within 7 days, while the order’s photos are still kept. If you ask us to, a person will look at the photo concerned and decide again; otherwise nobody sees it.
When a person sees anything. Nobody at Albumagic looks at your photos or watches your videos. If a viewer reports a video shared by link, that video’s links end for good; we read the reason the viewer gives, but we don’t watch the video. The only other cases are when you ask us to look at a refused or left-out photo (above), and when the law requires us to keep or hand over material, such as a report of apparent child sexual abuse material (section 6).
5. We don’t train AI on your photos
We never use your photos, titles or videos to train AI, and we never use them for marketing. Our sample videos are made from photos we own, never from a customer’s.
Our AI providers work under agreements with us:
- Anthropic (Claude): its commercial terms say it may not train models on what we send it.
- fal.ai: its terms and its data processing agreement let it use what we send only to provide its service to us, on our instructions. They also let it use anonymised or aggregated information drawn from requests, which no longer identifies anyone, to develop its services and models.
- Kuaishou, which makes the Kling models: we haven’t been able to confirm what it receives through fal.ai or what its terms allow (section 6).
Supabase and GitHub store and process photos only to run Albumagic for us, under their data processing agreements.
7. Where your data is kept
Our database and storage are in Ireland (EU), at Supabase on Amazon Web Services. Making a video means sending data to services in the US and possibly other countries (section 6). Bridgeshore Labs is a US company, and our team may work from Israel.
When personal data from the EU, the EEA, the UK or Switzerland goes to a country without an adequacy decision, these safeguards apply:
- Supabase, fal.ai, Anthropic and RevenueCat: the European Commission’s standard contractual clauses, with the UK Addendum, in their data processing agreements with us.
- GitHub: its certification under the EU-US Data Privacy Framework, with the UK Extension and the Swiss-US framework, and standard contractual clauses.
- Vercel: its certification under the EU-US Data Privacy Framework, and standard contractual clauses.
- Israel: the EU’s and the UK’s adequacy decisions.
- Kuaishou: any data fal passes on is covered only by fal’s own arrangements, which we haven’t been able to confirm.
You can ask us for a copy of these safeguards.
How we protect it
We use encryption in transit (HTTPS), private storage that only your account and our systems can reach, database rules that let the app touch only its own orders, and keys held in secret stores. Customers’ photos and videos never go into code repositories, issue trackers, logs or chats.
No system is perfectly secure. If a breach affects your data, we will act as the law requires, including telling the authorities and, where required, you. Because we don’t have your contact details, we may tell you in the app.
8. How long we keep it
Our back end applies this schedule by itself, checking every 15 minutes.
| Data | How long we keep it |
|---|---|
| An order you never send, with its photos | 24 hours after you started it |
| An order waiting for a payment that never arrives, with its photos | 3 days |
| Photos and working files: frames, descriptions and instructions, clips, music and the opening scene | 30 days after the video is first ready, or 7 days after an order fails or is refused |
| The video, its stills and its watch link | 90 days after the video is first ready |
| Order details: what you chose apart from the titles, the dates, the status and the consent record | While your account exists, so My videos can list your orders. The titles are removed with the video at 90 days |
| A viewer’s report about a watch link | The words the viewer typed: 30 days after we have read them. The fact that the video was reported stays with the order’s details, so the video never gets a link again |
| Invites | Your code and its count while your account exists; the record that a friend used your code while the friend’s account exists |
| Your anonymous account | Until you delete it. If the app isn’t opened for a year, and the account has no video waiting or kept and no free video or unused purchase left, we delete it automatically, with its orders, photos and videos |
| Purchase records | As long as tax and accounting law requires. If your account is deleted, they stay without any link to it |
| Emails you send us | As long as we need them to help you and to keep a record of what we agreed |
| Technical logs | Supabase: 7 days. Vercel: at most 30 days. GitHub run logs, which hold order numbers but no photos or titles: up to 90 days |
| Backups of our database | Deleted data can stay in Supabase’s daily backups for up to 7 days. Photos and videos aren’t in these backups |
| Copies at our AI providers | GitHub’s computers: deleted when each run ends. fal.ai: deleted within a day, with no history of our requests. Anthropic: within 30 days, or as section 6 says if its safety systems flag something. Kuaishou: under its own terms |
| Material reported to the authorities | One year after a report to NCMEC, as US law requires, or longer only where the law requires it |
9. Your rights
Depending on where you live, you may have the right to: access the data we hold about you and get a copy; have it corrected; have it deleted; restrict or object to our use of it, including use based on legitimate interests; receive the data you gave us in a portable format; and not be subject to a decision based only on automated processing that has legal or similarly significant effects on you. Where we rely on your consent, you can withdraw it at any time.
In the app, you can save your video with “Save or share”, and delete your account and everything in it in Settings (section 10).
By email, write to support@bridgeshorelabs.com with the account code shown in My videos and Settings. Because your account is anonymous, that code is how we find your data. If you’ve lost it, give us the order number on your Apple or Google receipt. We may ask for more details to make sure the request is yours. If you ask, we will send you a copy of what we hold. It’s free, and we reply within one month, or tell you why we need longer, as the law allows.
Complaints. You can complain to a data protection authority, in particular where you live or work. In the EU, that is the authority in your country; the European Data Protection Board lists them on its website. In the UK, it is the Information Commissioner’s Office. We would welcome the chance to help first.
If you live in the US
Residents of some US states, including California, have rights to know what personal information we collect, use and disclose; to access, correct and delete it; and to opt out of its sale, of its sharing for cross-context behavioural advertising, of targeted advertising and of profiling. We don’t sell or share personal information in those ways, so there is nothing to opt out of. We use sensitive personal information only to provide Albumagic, never to infer things about you. We give these rights to everyone, wherever they live.
We collect these categories of personal information: identifiers (the anonymous account number, and IP addresses in technical logs); commercial information (purchase records); audio, electronic and visual information (photos and videos); and other information you type (titles and messages). The sources are you, your phone, Apple or Google through RevenueCat, and people who watch a link or open an invite. We disclose them only to the services in section 6, for the purposes in section 2, and keep them for the periods in section 8.
To use these rights, write to us as above. You may use an authorised agent. If we turn down your request, you can appeal by replying to our answer; if we still say no, you can contact your state’s attorney general. We won’t treat you differently for using your rights.
10. Deleting your account
In the app: open Settings, tap “Delete my account and everything in it”, then confirm. We immediately delete your photos, videos, working files, order details and invite records, your account, and your record at RevenueCat. Save any video you want to keep first. An unused free video is lost too.
We keep only purchase records, without any link to you (section 8). Apple and Google keep their own records of your purchases.
Deleting the app doesn’t delete your account. Delete the account in Settings first, or write to us.
Without the app: email support@bridgeshorelabs.com with your account code or, if you’ve lost it, the order number on your Apple or Google receipt. We may ask for details that show the account is yours. We delete within 30 days and confirm by email. More help with deleting.
Deleted data can stay in our database backups for up to 7 days before it is gone for good.
11. Children
Albumagic is for adults. It isn’t directed at children, and we don’t knowingly let anyone under 18 use it or collect personal data from them. If you believe a child is using the app, write to us and we will delete the account.
Many videos include children, for example at a birthday or a special occasion. Their photos come from adults, as section 3 explains. We use them only to make the video, never for marketing or AI training, and delete them on the same schedule as all other photos.
12. Changes to this policy
We may update this policy when Albumagic, the law or our providers change. We will post the new version here with its date. If a change affects how we use photos or who receives them, the app will ask you to confirm before your next order.
13. Contact
Bridgeshore Labs, LLC, 1818 Bellmore Ave, North Bellmore, NY 11710, USA
Email: support@bridgeshorelabs.com. Please include your account code, which you’ll find in My videos and Settings.